Logic Flaw in Password-Protected Jitsi Meetings Affects User Security
CVE-2024-33530

7.5HIGH

Key Information:

Vendor

Jitsi

Vendor
CVE Published:
2 May 2024

What is CVE-2024-33530?

A logic flaw present in Jitsi Meet versions prior to 9391 compromises the security of password-protected meetings that employ a lobby feature. When a user is invited to join a call while waiting in the lobby, the meeting password is inadvertently revealed, allowing unauthorized access. This vulnerability underscores the importance of robust security measures in video conferencing tools to safeguard sensitive discussions and user information.

References

https://insinuator.net/2024/05/vulnerability-in-jitsi-mee...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.